reopen 345518 =
severity 345518 wishlist
retitle 345518 do not default to saving password and include configuration 
option
stop

On 02.01.06 14:21:30, Michael Biebl wrote:
> This setting is for the subversion command client.

Hmm, thought it would be authoritive for any program using libsvn0.
Especially as the stored credentials are used by the command line client
too. 

> password you can explicitly tell it if you want to store the password or
> not and kdesvn does as so.

Overlooked that small button.

> I don't consider this behaviour a bug.

I kind of do, because the default of kdesvn is to store passwords. Which
IMHO is not what other debian packages do in terms of security. I mean,
if somebody uses a subversion repository with authentication that is
probably to increase security. Especially as passwords are stored in
clear-text.

> Maybe a global setting in the
> configuration dialog would be useful so that kdesvn does not always
> prompt you if you want to store the password or not and this setting
> could be predefined with the value from .subversion/config if not
> explictely set. But this is more a wishlist bug than an security
> relevant bug.

Agreed. I'd like to have the default for "store password" option to be
off and maybe a possibility to remove the authentication information for
the current opened repository, so one can switch from storing to not
storing without fiddling with .subversion/auth/... files.

Andreas

-- 
You are as I am with You.

Attachment: pgpBlyZfJuEKf.pgp
Description: PGP signature

Reply via email to